shuting
shuting
1.7.0 is fairly old. @masihkhatibzadeh99 - can you try the latest version?
Can you explain what the policy does with `{{ @ || '' }}`? I don't think we support `@` character in generate policies.
We can prevent policy creation by validating if a generate rule has `@`.
>In functional terms on my rule, I want to exclude deletion but the opposite happens (deletion is blocked) with a scale down operation on my pod controller. Could it be...
Related - https://github.com/kyverno/kyverno/issues/11560#issuecomment-2475684286.
Hi @RayyanSeliya - thanks for digging into the issue! The [equality anchor](https://kyverno.io/docs/policy-types/cluster-policy/validate/#anchors) `=()` in Kyverno checks the corresponding value **only if** the key exists, which ignores `procMount` if not set....
Updates resources to allow `procMount: unmasked` https://github.com/kyverno/policies/pull/1296.
@eddycharly - how should be proceed?
Kindly ping @eddycharly .
@KhaledEmaraDev - needs manual cherry-pick.